Exempt MFA from Windows Logon by User Group

With DualShield you can exempt MFA from Windows Logon by users, user groups, or user domains. Commonly, customers set up MFA exemption by user group, as it is more flexible.

To exempt MFA by user group, create a Logon policy and bind it to a user group, e.g. "Temp Workers"

In the policy option "Multi-Factor authentication" select "Multi-factor authentication is not required for all users".